CVE-2025-8799

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-8799

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8799.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-8799

Published

2025-08-10T07:32:07.845Z

Modified

2026-07-15T19:14:44.511558Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Open5GS AMF npcf-build.c amf_nsmf_pdusession_build_create_sm_context denial of service

Details

A vulnerability was identified in Open5GS up to 2.7.5. Affected by this vulnerability is the function amfnpcfampolicycontrolbuildcreate/amfnsmfpdusessionbuildcreatesmcontext of the file src/amf/npcf-build.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is named cf63dd63197bf61a4b041aa364ba6a6199ab15e4. It is recommended to upgrade the affected component.

Database specific

{
    "cwe_ids": [
        "CWE-404"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8799.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "2.7.3"
                },
                {
                    "last_affected": "2.7.3"
                },
                {
                    "introduced": "2.7.4"
                },
                {
                    "last_affected": "2.7.4"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/open5gs/open5gs

Affected ranges

Type

GIT

Repo

https://github.com/open5gs/open5gs

Events

Introduced

Fixed

d9d3abdd480be96fac3bc8a997e83446648763ca

Fixed

cf63dd63197bf61a4b041aa364ba6a6199ab15e4

Database specific

{
    "cpe": "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.7.6"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

2.*

2.7.0

2.7.1

2.7.2

2.7.5

v0.*

v0.1.0

v0.1.1

v0.2.0

v0.3.0

v0.3.1

v0.3.10

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.3.8

v0.4.1

v0.4.2

v0.4.3

v0.4.4

v0.5.0

v0.5.1

v0.5.2

v1.*

v1.0.0

v1.1.0

v1.2.0

v1.2.1

v1.2.2

v1.2.3

v1.2.4

v1.3.0

v2.*

v2.0.0

v2.0.18

v2.0.22

v2.1.0

v2.1.1

v2.1.3

v2.1.4

v2.1.5

v2.1.7

v2.2.0

v2.2.1

v2.2.6

v2.2.7

v2.2.8

v2.2.9

v2.3.0

v2.3.2

v2.3.6

v2.4.0

v2.4.1

v2.4.3

v2.4.4

v2.4.5

v2.4.7

v2.4.8

v2.4.9

v2.6.1

v2.6.2

v2.6.3

v2.6.4

v2.6.6

v2.7.0

v2.7.1

v2.7.2

v2.7.5

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/open5gs/open5gs/commit/cf63dd63197bf61a4b041aa364ba6a6199ab15e4",
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "322043648375823419632966034769365407582",
                "58687234364705052673433610890824177252",
                "306217783375283444206339397477270778559",
                "130601244611164256223120383722945490069"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2025-8799-0a7eeb20",
        "target": {
            "file": "src/amf/nsmf-build.c"
        }
    },
    {
        "source": "https://github.com/open5gs/open5gs/commit/cf63dd63197bf61a4b041aa364ba6a6199ab15e4",
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "317961676468650742107044157673904297067",
            "length": 5313.0
        },
        "deprecated": false,
        "id": "CVE-2025-8799-62d39252",
        "target": {
            "function": "amf_nsmf_pdusession_build_create_sm_context",
            "file": "src/amf/nsmf-build.c"
        }
    },
    {
        "source": "https://github.com/open5gs/open5gs/commit/cf63dd63197bf61a4b041aa364ba6a6199ab15e4",
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "283248790413765403171449996415277650206",
                "268849625447358166600055196268977447642",
                "232437307082548256092272046609377932516",
                "48464079369937841911150231536755202461"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2025-8799-8525b661",
        "target": {
            "file": "src/amf/npcf-build.c"
        }
    },
    {
        "source": "https://github.com/open5gs/open5gs/commit/cf63dd63197bf61a4b041aa364ba6a6199ab15e4",
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207886675709087202224137015183825734197",
            "length": 4362.0
        },
        "deprecated": false,
        "id": "CVE-2025-8799-9de0324f",
        "target": {
            "function": "amf_npcf_am_policy_control_build_create",
            "file": "src/amf/npcf-build.c"
        }
    }
]

vanir_signatures_modified

"2026-07-15T19:14:44Z"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8799.json"